CVE-2026-8824: Buffer Overflow
A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk (version(s): 9.6.1). A specially crafted .bmp file can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using vtk 9.6.1 that process BMP files through the vtkBMPReader ExecuteDataWithInformation functionality are exposed. The issue can be triggered by a specially crafted BMP file.
What does an attacker need to exploit it?
An attacker needs to provide a malicious BMP file that is processed by the affected functionality. No privileges or user interaction are required according to the supplied CVSS vector.
What is the likely impact of successful exploitation?
Successful exploitation can cause a buffer overflow and affect availability. The supplied CVSS vector indicates no confidentiality or integrity impact.